The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Docker Scout CLI installation script from https://raw.githubusercontent.com/docker/scout-cli/main/install.sh. This is an official resource from a well-known technology provider.
[REMOTE_CODE_EXECUTION]: The skill contains educational code blocks demonstrating script downloads and execution (e.g., https://example.com/setup.sh) to illustrate container hardening principles. These snippets are clearly labeled for documentation and are not executed by the skill during operation.
[COMMAND_EXECUTION]: The skill executes local system commands such as docker scout version, docker scout cves, and docker scout sbom to perform security analysis on container images.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data including Dockerfiles and container configuration files, which constitutes a potential injection surface.
Ingestion points: Reads Dockerfile, docker-compose.yml, and .dockerignore files.
Boundary markers: None identified in the prompt templates for delimiting untrusted content.
Capability inventory: The skill can execute shell commands through the bash tool.
Sanitization: No specific sanitization or filtering is applied to the content of the analyzed files.

docker-scout-scanner